Experiment: Anchor target=_blank implies rel=noopener |
||||
Issue descriptionAs released experimentally in Safari TP today: https://twitter.com/chris_dumez/status/1055308539042816002 https://webkit.org/blog/8475/release-notes-for-safari-technology-preview-68/ https://trac.webkit.org/changeset/237144/webkit/ This makes `<a target="_blank">` for external links imply the behavior of `rel="noopener"` by default.
,
Oct 25
/cc Chris who is making this change in WebKit. This sounds great for security to me! Is it possible we could easily add a UseCounter for accessing the opener from such windows (either before or after making this change)? I know some sites enumerate the whole global object, so maybe it's not useful to monitor for calls to the window.opener getter. Regardless, trying this out in Chrome too will get us additional data on the compat risk that Chris may not be able to get from Safari TP alone. FWIW, even if there's a little site breakage, I suspect this change would be worth making - we'll just need to follow the blink breaking change process...
,
Oct 26
,
Jan 10
|
||||
►
Sign in to add a comment |
||||
Comment 1 by erikc...@chromium.org
, Oct 25